Repository navigation
Virus alert #778
Description
Describe the bug
Compiling my Android app with the following directives results in an APK that is detected as a trojan
To Reproduce
// Adding the following to build.gradle.kts will pull these libraries in, compile and output an APK that is detected as a trojan
implementation("io.socket:socket.io-client:2.1.1")
implementation("com.squareup.okhttp3:okhttp:4.12.0")
**Expected behavior**
Well I guess we shouldn't be getting this warning - I'm not exactly sure how this can be dealt with third party AVs
and perhaps also ensure a virus really isn't lurking in the above repos?
Activity
risharde commentedon Feb 2, 2025
@darrachequesne
risharde commentedon Feb 11, 2025
Hmmm interesting there's been no response
Imagine if the repo does indeed have a virus in it how many people are using the library and have it out in the wild
risharde commentedon Feb 11, 2025
@Harsh5488
darrachequesne commentedon Feb 16, 2025
Hi! Sorry for the delay.
Which system detects the trojan? When uploading your app to the store? Does the warning comes from this library, or from OkHttp?
risharde commentedon Feb 16, 2025
Hi @darrachequesne , glad to hear from you, that's the part I can't really tell off hand - I've avoided adding the libraries back since I'm working on a live app but it's those 2 since socketio requires the okttp according to what I saw on the socket io instructions. Apologies for not being able to compile either one to determine which it is - if you have time to explore, would appreciate it
When I build the apk, I tested it by uploading it to virustotal - actually this was originally discovered by a user who used the app and accused me of being a scammer due to the virus warning - can't say I blame him for thinking that after seeing the virustotal results - I was alarmed + surprised!
risharde commentedon Feb 22, 2025
@darrachequesne thanks for your patience, I got a chance to compile the app and virus total detects the issue even when socket.io is not included - so it's the implementation("com.squareup.okhttp3:okhttp:4.12.0") dependency which is causing the virus alert - I guess this is still a problem for socket.io since it depends on the library?
atul109 commentedon Jul 15, 2025
To reproduce the issue create a new project in android studio and add
implementation("io.socket:socket.io-client:2.1.0")Upload apk to Google drive and install from that link. The below error will appear.
Its same with versions 2.0.0 and 2.1.2
{ "error": { "code": 403, "message": "This file has been identified as malware or spam and cannot be downloaded", "errors": [ { "message": "This file has been identified as malware or spam and cannot be downloaded", "domain": "global", "reason": "abuse" } ] } }